MAL-2025-20567 Malicious code in final-sigma-warn-emulate-big (npm)

The package final-sigma-warn-emulate-big was found to contain malicious code...

MAL-2025-38507 Malicious code in visualize-warn-finally-bash-final (npm)

The package visualize-warn-finally-bash-final was found to contain malicious code...

Malicious code in unix-promise-final-grid-old (npm)

The package unix-promise-final-grid-old was found to contain malicious code...

Malicious code in web-final-balance-fork-emulate (npm)

The package web-final-balance-fork-emulate was found to contain malicious code...

Malicious code in star-awk-interface-final-psi (npm)

The package star-awk-interface-final-psi was found to contain malicious code...

Malicious code in air-container-await-mock-final (npm)

The package air-container-await-mock-final was found to contain malicious code...

Malicious code in visualize-warn-finally-bash-final (npm)

The package visualize-warn-finally-bash-final was found to contain malicious code...

SUSE CVE-2025-55163

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.124.Final and 4.2.4.Final, Netty is vulnerable to MadeYouReset DDoS. This is a logical vulnerability in the HTTP/2 protocol, that uses malformed HTTP/2 control frames in order to break the max concurrent...

DEBIAN-CVE-2025-55163

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.124.Final and 4.2.4.Final, Netty is vulnerable to MadeYouReset DDoS. This is a logical vulnerability in the HTTP/2 protocol, that uses malformed HTTP/2 control frames in order to break the max concurrent...

UBUNTU-CVE-2025-55163

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.124.Final and 4.2.4.Final, Netty is vulnerable to MadeYouReset DDoS. This is a logical vulnerability in the HTTP/2 protocol, that uses malformed HTTP/2 control frames in order to break the max concurrent...

Linux Distros Unpatched Vulnerability : CVE-2021-46951

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: tpm: efi: Use local variable for calculating final log size When tpmreadlogefi is called...

kernel: serial: core: fix transmit-buffer reset and memleak

In the Linux kernel, the following vulnerability has been resolved: serial: core: fix transmit-buffer reset and memleak Commit 761ed4a94582 "tty: serialcore: convert uartclose to use ttyportclose" converted serial core to use ttyportclose but failed to notice that the transmit buffer still needs ...

SUSE CVE-2025-38411

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix double put of request If a netfs request finishes during the pause loop, it will have the ref that belongs to the INPROGRESS flag removed at that point - however, if it then goes to the final wait loop, that will also...

PT-2025-34434

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A revert was implemented to address an issue where the dma buf field in the drm gem object structure became unstable during the object instance's lifetime. Specifically, the field coul...

PT-2025-34433

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists due to an unstable dma buf field within the drm gem object structure in the Linux kernel. The field can become NULL when user space releases the final GEM handle on the...

The vulnerability of Intel microprogramming software relates to the improper implementation of final automata (FSM) in hardware logic, allowing a hacker to trigger a service failure.

The vulnerability of Intel microprogramming software is related to the incorrect implementation of final automata FSM in hardware logic. Exploiting this vulnerability can allow an attacker to cause malfunctions in the system’s operation...

The vulnerability of the nfs3_proc_create() function in the fs/nfs/nfs3proc.c module of the Linux file system support module allows a attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the nfs3proccreate function in the fs/nfs/nfs3proc.c module of the Linux file system support module is related to improper memory release before deleting the last reference memory leak. Exploiting this vulnerability could allow an attacker to compromise the confidentiality an...

Vulnerability of the virtblk_freeze() function in the drivers/block/virtio_blk.c module – The Linux kernel’s block device support driver allows attackers to compromise the confidentiality and accessibility of protected information.

Vulnerability of the virtblkfreeze function in the drivers/block/virtioblk.c module – The Linux kernel’s block device support driver is vulnerable to a memory leak when the last reference is not properly freed before removal. Exploiting this vulnerability could allow an attacker to compromise the...

PDLRecover: Privacy-preserving Decentralized Model Recovery with Machine Unlearning

Decentralized learning is vulnerable to poison attacks, where malicious clients manipulate local updates to degrade global model performance. Existing defenses mainly detect and filter malicious models, aiming to prevent a limited number of attackers from corrupting the global model. However,...

CVE-2022-41915

Netty project is an event-driven asynchronous network application framework. Starting in version 4.1.83.Final and prior to 4.1.86.Final, when calling DefaultHttpHeadesr.set with an iterator of values, header value validation was not performed, allowing malicious header values in the iterator to...